%undefine _hardened_build

%global flagday 1:2.02-0.87.el7.centos.2

%global tarversion 2.02~beta2

%undefine _missing_build_ids_terminate_build

%ifarch i686

%define platform pc

%define legacy_package_arch i386

%define legacy_target_cpu_name i386

%define target_cpu_name i386

%endif

%ifarch x86_64

%define mock 1

%endif

Name:           grub2

Epoch:          1

Version:        2.02

Release:        0.87.0.2%{?dist}%{?buildid}.11

Summary:        Bootloader with support for Linux, Multiboot and more

Group:          System Environment/Base

License:        GPLv3+

URL:            http://www.gnu.org/software/grub/

Source0:        ftp://alpha.gnu.org/gnu/grub/grub-%{tarversion}.tar.xz

#Source0:	ftp://ftp.gnu.org/gnu/grub/grub-%%{tarversion}.tar.xz

Source1:	grub.macros

Source2:	grub.patches

Source3:	http://unifoundry.com/unifont-5.1.20080820.pcf.gz

Source4:	gitignore

Source5:       centos-ca-secureboot.der

Source6:       centossecureboot001.crt

Source7:       centossecurebootca2.crt

Source8:       centossecureboot202.crt

Source9:	sbat.csv.in

%include %{SOURCE1}

# generate with do-rebase

%include %{SOURCE2}

BuildRequires:  flex bison binutils python

BuildRequires:  ncurses-devel xz-devel bzip2-devel

BuildRequires:  freetype-devel libusb-devel

BuildRequires:	rpm-devel rpm-libs

%ifarch %{sparc} aarch64 ppc64le

# sparc builds need 64 bit glibc-devel - also for 32 bit userland

BuildRequires:  /usr/lib64/crt1.o glibc-static glibc-devel

%else

%ifarch x86_64

BuildRequires:  /usr/lib64/crt1.o glibc-static(x86-64) glibc-devel(x86-64)

%else

# ppc64 builds need the ppc crt1.o

BuildRequires:  /usr/lib/crt1.o glibc-static glibc-devel

%endif

%endif

BuildRequires:  autoconf automake autogen device-mapper-devel

BuildRequires:	freetype-devel gettext-devel git

BuildRequires:	texinfo

BuildRequires:	dejavu-sans-fonts

BuildRequires:	help2man

%ifarch %{efi_arch}

BuildRequires:	pesign >= 0.99-8

%endif

%if %{?_with_ccache: 1}%{?!_with_ccache: 0}

BuildRequires:  ccache

%endif

%if 0%{?centos}

%global efidir centos

%endif

ExcludeArch:	s390 s390x %{arm}

Obsoletes:	%{name} <= %{flagday}

%if 0%{with_legacy_arch}

Requires:	%{name}-%{legacy_package_arch} = %{evr}

%else

Requires:	%{name}-%{package_arch} = %{evr}

%endif

%global desc \

The GRand Unified Bootloader (GRUB) is a highly configurable and \

customizable bootloader with modular architecture.  It supports a rich \

variety of kernel formats, file systems, computer architectures and \

hardware devices.\

%{nil}

%description

%{desc}

%ifarch x86_64

%package common

Summary:	grub2 common layout

Group:		System Environment/Base

BuildArch:	noarch

%description common

This package provides some directories which are required by various grub2

subpackages.

%endif

%package tools

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Obsoletes:	%{name}-tools <= %{flagday}

%ifarch x86_64

Obsoletes:	%{name}-tools-efi <= %{flagday}

Provides:	%{name}-tools-efi = %{evr}

%endif

Requires:	%{name}-tools-minimal = %{evr}

Requires:	%{name}-common = %{evr}

Requires:	gettext os-prober which file

Requires(pre):  dracut

Requires(post): dracut

%description tools

%{desc}

This subpackage provides tools for support of all platforms.

%package tools-minimal

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Requires:	gettext

Requires:	%{name}-common = %{evr}

Obsoletes:	%{name}-tools <= %{flagday}

%description tools-minimal

%{desc}

This subpackage provides tools for support of all platforms.

%package tools-extra

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Requires:	gettext os-prober which file

Requires:	%{name}-tools-minimal = %{epoch}:%{version}-%{release}

Requires:	%{name}-common = %{epoch}:%{version}-%{release}

Requires:	%{name}-tools = %{evr}

Obsoletes:	%{name}-tools <= %{flagday}

%description tools-extra

%{desc}

This subpackage provides tools for support of all platforms.

%if 0%{with_efi_arch}

%define_efi_variant %{package_arch} -p

%endif

%if 0%{with_alt_efi_arch}

%define_efi_variant %{alt_package_arch}

%endif

%if 0%{with_legacy_arch}

%define_legacy_variant %{legacy_package_arch}

%endif

%prep

%setup -T -c -n grub-%{tarversion}

%do_common_setup

sed -i.orig -e 's@/efi/EFI/redhat/@/efi/EFI/%{efidir}/@' \

    grub-%{tarversion}/util/grub-setpassword.in

touch --reference=grub-%{tarversion}/util/grub-setpassword.in.orig \

    grub-%{tarversion}/util/grub-setpassword.in

%if 0%{with_efi_arch}

%do_setup %{grubefiarch}

sed -e "s,@@VERSION@@,%{evr},g" %{SOURCE9} \

	> grub-%{grubefiarch}-%{tarversion}/sbat.csv

%endif

%if 0%{with_alt_efi_arch}

%do_setup %{grubaltefiarch}

%endif

%if 0%{with_legacy_arch}%{with_legacy_utils}

%do_setup %{grublegacyarch}

%endif

%build

%if 0%{with_efi_arch}

%do_primary_efi_build %{grubefiarch} %{grubefiname} %{grubeficdname} %{_target_platform} "'%{efi_cflags}'" %{SOURCE5} %{SOURCE6} centossecureboot001 %{SOURCE7} %{SOURCE8} centossecureboot202

%endif

%if 0%{with_alt_efi_arch}

%do_alt_efi_build %{grubaltefiarch} %{grubaltefiname} %{grubalteficdname} %{_alt_target_platform} "'%{alt_efi_cflags}'" %{SOURCE5} %{SOURCE6} centossecureboot001 %{SOURCE7} %{SOURCE8} centossecureboot202

%endif

%if 0%{with_legacy_arch}%{with_legacy_utils}

%do_legacy_build %{grublegacyarch}

%endif

%do_common_build

%install

set -e

rm -fr $RPM_BUILD_ROOT

%do_common_install

%if 0%{with_efi_arch}

%do_efi_install %{grubefiarch} %{grubefiname} %{grubeficdname}

%endif

%if 0%{with_alt_efi_arch}

%do_alt_efi_install %{grubaltefiarch} %{grubaltefiname} %{grubalteficdname}

%endif

%if 0%{with_legacy_arch}%{with_legacy_utils}

%do_legacy_install %{grublegacyarch} %{alt_grub_target_name}

%endif

${RPM_BUILD_ROOT}/%{_bindir}/%{name}-editenv ${RPM_BUILD_ROOT}/boot/efi/EFI/%{efidir}/grubenv create

rm -f $RPM_BUILD_ROOT%{_infodir}/dir

%find_lang grub

# Make selinux happy with exec stack binaries.

mkdir ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/

cat << EOF > ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/grub2.conf

# these have execstack, and break under selinux

-b /usr/bin/grub2-script-check

-b /usr/bin/grub2-mkrelpath

-b /usr/bin/grub2-fstest

-b /usr/sbin/grub2-bios-setup

-b /usr/sbin/grub2-probe

-b /usr/sbin/grub2-sparc64-setup

EOF

# Don't run debuginfo on all the grub modules and whatnot; it just

# rejects them, complains, and slows down extraction.

%global finddebugroot "%{_builddir}/%{?buildsubdir}/debug"

%global dip RPM_BUILD_ROOT=%{finddebugroot} %{__debug_install_post}

%define __debug_install_post (						\

	mkdir -p %{finddebugroot}/usr					\

	mv ${RPM_BUILD_ROOT}/usr/bin %{finddebugroot}/usr/bin		\

	mv ${RPM_BUILD_ROOT}/usr/sbin %{finddebugroot}/usr/sbin		\

	%{dip}								\

	install -m 0755 -d %{buildroot}/usr/lib/ %{buildroot}/usr/src/	\

	cp -al %{finddebugroot}/usr/lib/debug/				\\\

		%{buildroot}/usr/lib/debug/				\

	cp -al %{finddebugroot}/usr/src/debug/				\\\

		%{buildroot}/usr/src/debug/ )				\

	mv %{finddebugroot}/usr/bin %{buildroot}/usr/bin		\

	mv %{finddebugroot}/usr/sbin %{buildroot}/usr/sbin		\

	%{nil}

%clean    

rm -rf $RPM_BUILD_ROOT

%pre tools

if [ -f /boot/grub2/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/grub2/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' /boot/grub2/user.cfg

    fi

elif [ -f /boot/efi/EFI/%{efidir}/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/efi/EFI/%{efidir}/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' \

	    /boot/efi/EFI/%{efidir}/user.cfg

    fi

elif [ -f /etc/grub.d/01_users ] && \

	grep -q '^password_pbkdf2 root' /etc/grub.d/01_users ; then

    if [ -f /boot/efi/EFI/%{efidir}/grub.cfg ]; then

	# on EFI we don't get permissions on the file, but

	# the directory is protected.

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/efi/EFI/%{efidir}/user.cfg

    fi

    if [ -f /boot/grub2/grub.cfg ]; then

	install -m 0600 /dev/null /boot/grub2/user.cfg

	chmod 0600 /boot/grub2/user.cfg

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/grub2/user.cfg

    fi

fi

if [ -f /boot/grub2/grubenv ] && ! [ -f /boot/efi/EFI/%{efidir}/grubenv ] ; then

	if [ -e /boot/efi/EFI/%{efidir}/grubenv ] ; then

		rm /boot/efi/EFI/%{efidir}/grubenv

		mv /boot/grub2/grubenv /boot/efi/EFI/%{efidir}/grubenv

		ln -sf ../efi/EFI/%{efidir}/grubenv /boot/grub2/grubenv

	fi

fi

%post tools

if [ "$1" = 1 ]; then

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%triggerun -- grub2 < 1:1.99-4

# grub2 < 1.99-4 removed a number of essential files in postun. To fix upgrades

# from the affected grub2 packages, we first back up the files in triggerun and

# later restore them in triggerpostun.

# https://bugzilla.redhat.com/show_bug.cgi?id=735259

# Back up the files before uninstalling old grub2

mkdir -p /boot/grub2.tmp &&

mv -f /boot/grub2/*.mod \

      /boot/grub2/*.img \

      /boot/grub2/*.lst \

      /boot/grub2/device.map \

      /boot/grub2.tmp/ || :

%triggerpostun -- grub2 < 1:1.99-4

# ... and restore the files.

test ! -f /boot/grub2/device.map &&

test -d /boot/grub2.tmp &&

mv -f /boot/grub2.tmp/*.mod \

      /boot/grub2.tmp/*.img \

      /boot/grub2.tmp/*.lst \

      /boot/grub2.tmp/device.map \

      /boot/grub2/ &&

rm -r /boot/grub2.tmp/ || :

%preun tools

if [ "$1" = 0 ]; then

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%files

%ifnarch x86_64 %{ix86}

%exclude %{_bindir}/%{name}-render-label

%exclude %{_sbindir}/%{name}-bios-setup

%exclude %{_sbindir}/%{name}-macbless

%endif

%ifnarch x86_64

%exclude /boot/grub2/grubenv

%exclude /boot/efi/EFI/*/grubenv

%exclude %{_datadir}/locale

%endif

%ifarch x86_64

%files common -f grub.lang

%dir %{_libdir}/grub/

%dir %{_datarootdir}/grub/

%dir %{_datarootdir}/grub/themes/

%exclude %{_datarootdir}/grub/themes/*

%attr(0700,root,root) %dir %{_sysconfdir}/grub.d

%dir %{_datarootdir}/grub

%exclude %{_datarootdir}/grub/*

%dir /boot/%{name}

%dir /boot/%{name}/themes/

%dir /boot/%{name}/themes/system

%exclude /boot/%{name}/themes/system/*

%attr(0700,root,root) %dir /boot/grub2

%exclude /boot/grub2/*

%dir %verify(not mtime) %attr(0700,root,root)/boot/efi/EFI/%{efidir}

%exclude /boot/efi/EFI/%{efidir}/*

%license %{common_srcdir}/COPYING

%ghost %config(noreplace) /boot/grub2/grubenv

%doc %{common_srcdir}/INSTALL

%doc %{common_srcdir}/NEWS

%doc %{common_srcdir}/README

%doc %{common_srcdir}/THANKS

%doc %{common_srcdir}/TODO

%doc %{common_srcdir}/docs/grub.html

%doc %{common_srcdir}/docs/grub-dev.html

%doc %{common_srcdir}/docs/font_char_metrics.png

%endif

%files tools-minimal

%defattr(-,root,root,-)

%{_sysconfdir}/prelink.conf.d/grub2.conf

%{_sbindir}/%{name}-get-kernel-settings

%{_sbindir}/%{name}-set-default

%{_sbindir}/%{name}-setpassword

%{_bindir}/%{name}-editenv

%{_bindir}/%{name}-mkpasswd-pbkdf2

%{_datadir}/man/man3/%{name}-get-kernel-settings*

%{_datadir}/man/man8/%{name}-set-default*

%{_datadir}/man/man8/%{name}-setpassword*

%{_datadir}/man/man1/%{name}-editenv*

%{_datadir}/man/man1/%{name}-mkpasswd-*

%files tools

%defattr(-,root,root,-)

%attr(0644,root,root) %ghost %config(noreplace) %{_sysconfdir}/default/grub

%config %{_sysconfdir}/grub.d/??_*

%{_sysconfdir}/grub.d/README

%{_infodir}/%{name}*

%{_datarootdir}/grub/*

%exclude %{_datarootdir}/grub/themes

%exclude %{_datarootdir}/grub/*.h

%{_datarootdir}/bash-completion/completions/grub

%{_sbindir}/%{name}-install

%{_sbindir}/%{name}-mkconfig

%{_sbindir}/%{name}-probe

%{_sbindir}/%{name}-rpm-sort

%{_sbindir}/%{name}-reboot

%{_bindir}/%{name}-file

%{_bindir}/%{name}-menulst2cfg

%{_bindir}/%{name}-mkrelpath

%{_bindir}/%{name}-script-check

%{_datadir}/man/man?/*

# exclude man pages from tools-extra

%exclude %{_datadir}/man/man8/%{name}-sparc64-setup*

%exclude %{_datadir}/man/man8/%{name}-install*

%exclude %{_datadir}/man/man1/%{name}-fstest*

%exclude %{_datadir}/man/man1/%{name}-glue-efi*

%exclude %{_datadir}/man/man1/%{name}-kbdcomp*

%exclude %{_datadir}/man/man1/%{name}-mkfont*

%exclude %{_datadir}/man/man1/%{name}-mkimage*

%exclude %{_datadir}/man/man1/%{name}-mklayout*

%exclude %{_datadir}/man/man1/%{name}-mknetdir*

%exclude %{_datadir}/man/man1/%{name}-mkrescue*

%exclude %{_datadir}/man/man1/%{name}-mkstandalone*

%exclude %{_datadir}/man/man1/%{name}-syslinux2cfg*

# exclude man pages from tools-minimal

%exclude %{_datadir}/man/man3/%{name}-get-kernel-settings*

%exclude %{_datadir}/man/man8/%{name}-set-default*

%exclude %{_datadir}/man/man8/%{name}-setpassword*

%exclude %{_datadir}/man/man1/%{name}-editenv*

%exclude %{_datadir}/man/man1/%{name}-mkpasswd-*

%ifarch x86_64 %{?ix86}

%{_sbindir}/%{name}-macbless

%{_bindir}/%{name}-render-label

%{_datadir}/man/man8/%{name}-macbless*

%{_datadir}/man/man1/%{name}-render-label*

%else

%exclude %{_sbindir}/%{name}-macbless

%exclude %{_bindir}/%{name}-render-label

%exclude %{_datadir}/man/man8/%{name}-macbless*

%exclude %{_datadir}/man/man1/%{name}-render-label*

%endif

%if %{with_legacy_utils}

%{_sbindir}/%{name}-install

%ifarch %{ix86} x86_64

%{_sbindir}/%{name}-bios-setup

%else

%exclude %{_sbindir}/%{name}-bios-setup

%exclude %{_datadir}/man/man8/%{name}-bios-setup*

%endif

%ifarch %{sparc}

%{_sbindir}/%{name}-sparc64-setup

%else

%exclude %{_sbindir}/%{name}-sparc64-setup

%exclude %{_datadir}/man/man8/%{name}-sparc64-setup*

%endif

%ifarch %{sparc} ppc ppc64 ppc64le

%{_sbindir}/%{name}-ofpathname

%else

%exclude %{_sbindir}/%{name}-ofpathname

%exclude %{_datadir}/man/man8/%{name}-ofpathname*

%endif

%endif

%files tools-extra

%{_sbindir}/%{name}-sparc64-setup

%{_sbindir}/%{name}-ofpathname

%{_bindir}/%{name}-fstest

%{_bindir}/%{name}-glue-efi

%{_bindir}/%{name}-kbdcomp

%{_bindir}/%{name}-mkfont

%{_bindir}/%{name}-mkimage

%{_bindir}/%{name}-mklayout

%{_bindir}/%{name}-mknetdir

%ifnarch %{sparc}

%{_bindir}/%{name}-mkrescue

%endif

%{_bindir}/%{name}-mkstandalone

%{_bindir}/%{name}-syslinux2cfg

%{_sysconfdir}/sysconfig/grub

%{_datadir}/man/man8/%{name}-sparc64-setup*

%{_datadir}/man/man8/%{name}-install*

%{_datadir}/man/man1/%{name}-fstest*

%{_datadir}/man/man1/%{name}-glue-efi*

%{_datadir}/man/man1/%{name}-kbdcomp*

%{_datadir}/man/man1/%{name}-mkfont*

%{_datadir}/man/man1/%{name}-mkimage*

%{_datadir}/man/man1/%{name}-mklayout*

%{_datadir}/man/man1/%{name}-mknetdir*

%{_datadir}/man/man1/%{name}-mkrescue*

%{_datadir}/man/man1/%{name}-mkstandalone*

%{_datadir}/man/man8/%{name}-ofpathname*

%{_datadir}/man/man1/%{name}-syslinux2cfg*

%exclude %{_datarootdir}/grub/themes/starfield

%if 0%{with_efi_arch}

%define_efi_variant_files %{package_arch} %{grubefiname} %{grubeficdname} %{grubefiarch} %{target_cpu_name} %{grub_target_name}

%endif

%if 0%{with_alt_efi_arch}

%define_efi_variant_files %{alt_package_arch} %{grubaltefiname} %{grubalteficdname} %{grubaltefiarch} %{alt_target_cpu_name} %{alt_grub_target_name}

%endif

%if 0%{with_legacy_arch}

%define_legacy_variant_files %{legacy_package_arch} %{grublegacyarch}

%else

%if 0%{with_legacy_utils}

%exclude %{_sysconfdir}/%{name}.cfg

%exclude %{_libdir}/grub/%{grublegacyarch}/*

%exclude %{_libdir}/grub/%{grublegacyarch}/

%endif

%endif

%changelog

* Wed Nov 16 2022 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11

- Bump sbat

- Resolves: CVE-2022-28733

* Thu Sep 15 2022 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10

- Backport the relevant CVE fixes from the 2022-05-24 drop

- Resolves: CVE-2022-28733

* Tue Mar 29 2022 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9

- Bump for signing

- Resolves: #1892860

* Wed Mar 09 2022 Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8

- Fix accidental reboot in grub_exit

- Resolves: #1892860

* Mon May 17 2021 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7

- Fix boot failures in ppc64le caused by storage race condition (diegodo)

  Resolves: rhbz#1942148

* Fri Mar 05 2021 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6

- Fix ppc64le performance issues (diegodo)

  Resolves: rhbz#1759298

* Thu Mar 04 2021 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5

- Add the at keyboard patches that weren't included

  Resolves: rhbz#1892240

* Thu Mar 04 2021 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4

- add keylayouts and at_keyboard modules to EFI binary

  Resolves: rhbz#1892240

* Wed Mar 03 2021 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3

- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)

  Resolves: rhbz#1892240

* Fri Feb 26 2021 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2

- Fix another batch of CVEs

  Resolves: CVE-2020-14372

  Resolves: CVE-2020-25632

  Resolves: CVE-2020-25647

  Resolves: CVE-2020-27749

  Resolves: CVE-2020-27779

  Resolves: CVE-2021-20225

  Resolves: CVE-2021-20233

* Wed Nov 18 2020 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1

- Fix keyboards that report IBM PC AT scan codes

  Resolves: rhbz#1892240

* Mon Aug 24 2020 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87

- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB

  Resolves: rhbz#1869987

* Mon Jul 27 2020 Peter Jones <pjones@redhat.com> - 2.02-0.86

- Fix a mis-merge

  Related: CVE-2020-15705

* Mon Jul 27 2020 Peter Jones <pjones@redhat.com> - 2.02-0.85

- Couple more late fixes.

  Resolves: CVE-2020-10713

  Resolves: CVE-2020-14308

  Resolves: CVE-2020-14309

  Resolves: CVE-2020-14310

  Resolves: CVE-2020-14311

  Resolves: CVE-2020-15705

* Sun Jul 26 2020 Peter Jones <pjones@redhat.com> - 2.02-0.84

- Couple more late fixes.

  Resolves: CVE-2020-10713

  Resolves: CVE-2020-14308

  Resolves: CVE-2020-14309

  Resolves: CVE-2020-14310

  Resolves: CVE-2020-14311

* Mon Jul 20 2020 Peter Jones <pjones@redhat.com> - 2.02-0.83

- Fix several CVEs:

  Resolves: CVE-2020-10713

  Resolves: CVE-2020-14308

  Resolves: CVE-2020-14309

  Resolves: CVE-2020-14310

  Resolves: CVE-2020-14311

* Mon Mar 23 2020 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82

- Prepend prefix when HTTP path is relative

- efi/http: Export {fw,http}_path variables to make them global

  Resolves: rhbz#1616395

- efi/http: Enclose literal IPv6 addresses in square brackets

- efi/net: Allow to specify a port number in addresses

- efi/ip4_config: Improve check to detect literal IPv6 addresses

- efi/net: Print a debug message if parsing the address fails

  Resolves: rhbz#1732765

* Fri Sep 13 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81

- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64

  Resolves: rhbz#1748019

* Wed Mar 27 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80

- Rebuild with correct build target for signing

  Resolves: rhbz#1693213

* Tue Mar 26 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79

- Ignore the modification time when doing RPM verification of /boot/efi files

  Resolves: rhbz#1496952

* Wed Mar 20 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78

- Prevent errors from diskfilter scan of removable drives

  Resolves: rhbz#1446418

- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file

  Resolves: rhbz#1497918

- Remove glibc32 and glibc-static(x86-32) BuildRequires

  Resolves: rhbz#1614259

* Thu Oct 25 2018 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.77

- Re-enable regexp module

  Resolves: rhbz#1630678

* Mon Jul 30 2018 pjones <pjones@redhat.com> - 2.02.0.76

- Fix PCIe probing in EFI UGA driver.

  Resolves: rhbz#1583708

* Wed Jul 18 2018 Peter Jones <pjones@redhat.com> - 2.02-0.74

- Fix symlink issues with grubenv

  Resolves: rhbz#1602773

  Related: rhbz#1497918

- Make the common subpackage only build on x86_64 to avoid timestamp

  mismatches.

  Related: rhbz#1602773

  Related: rhbz#1497918

* Fri Jun 29 2018 Peter Jones <pjones@redhat.com> - 2.02-0.73

- Fix loading grub modules with no symbols defined.

  Related: rhbz#1490981

* Thu Jun 28 2018 Peter Jones <pjones@redhat.com> - 2.02-0.72

- Revert module dir fix; it still doesn't work.

  Resolves: rhbz#1594703

* Mon Jun 25 2018 Peter Jones <pjones@redhat.com> - 2.02-0.71

- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,

  so one more build to avoid the regression.

  Related: rhbz#1340893

* Mon Jun 25 2018 Peter Jones <pjones@redhat.com> 2.02-0.70

- ... and once more, because I built for the wrong target.

  Related: rhbz#1340893

* Mon Jun 25 2018 Peter Jones <pjones@redhat.com> - 2.02-0.69

- Build utilities on i686 as well, so grubby can build-dep it there.

  Related: rhbz#1340893

* Fri Jun 22 2018 Peter Jones <pjones@redhat.com> - 2.02-0.68

- More work on /boot/efi/... permissions

  Resolves: rhbz#1496952

- Rework grubenv symlinks and handle them on upgrades

  Resolves: rhbz#1497918

- Make grub2-setpassword -o work

  Resolves: rhbz#1512749

* Thu Jun 21 2018 Peter Jones <pjones@redhat.com> - 2.02-0.67

- Make the permissions on /boot/efi/... match the filesystem's requirements.

  Resolves: rhbz#1496952

* Thu Jun 21 2018 Peter Jones <pjones@redhat.com> - 2.02-0.66

- Fix EFI UGA driver when the framebuffer is above 4G

  Resolves: rhbz#1457988

- Handle XFS filesystems with sparse inodes

  Resolves: rhbz#1402716

- Support HTTP booting

  Resolves: rhbz#1490981

* Mon Oct 09 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65.el7_4.2

- Fix an incorrect man page exclusion on x86_64.

* Fri Oct 06 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65.1

- More precise requires and obsoletes on the -tools* subpackages to avoid

  issues with mixing and matching repos the subpackages are split between.

* Fri Sep 22 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65

- Fix spurious : at the end of the mac address netboot paths.

  Resolves: rhbz#1483740

* Wed May 31 2017 Peter Jones <pjones@redhat.com> - 2.02-0.64

- Revert pkglibdir usage; we have to coordinate this with Lorax.

  Related: rhbz#1455243

* Tue May 30 2017 pjones <pjones@redhat.com> - 2.02-0.63

- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.

  Related: rhbz#1455243

* Tue May 30 2017 Peter Jones <pjones@redhat.com> - 2.02-0.62

- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.

  Related: rhbz#1455243

* Wed May 24 2017 Peter Jones <pjones@redhat.com> - 2.02-0.61

- Fix some minor ia32 booting bugs

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

- Add support for non-Ethernet network cards

  Related: rhbz#1232432

- Add support for http booting

  Resolves: rhbz#1232432

- Fix efi module subpackage obsoletes/provides

  Resolves: rhbz#1447723

- Make ppc modules subpackages use different directories on the filesystem.

  Resolves: rhbz#1455243

* Thu Apr 20 2017 Peter Jones <pjones@redhat.com> - 2.02-0.60

- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it

  exists.  This is also why the bug we fixed in 0.59 showed up at all.

  Resolves: rhbz#1443809

  Resolves: rhbz#1442970

- Fix a regexp problem where rpm spec parser un-escapes things that

  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/

  to fail.

  Related: rhbz#1443809

* Wed Apr 19 2017 Peter Jones <pjones@redhat.com> - 2.02-0.59

- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder

  Resolves: rhbz#1442970

* Wed Apr 19 2017 Peter Jones <pjones@redhat.com> - 2.02-0.58

- Add Aarch64 FDT #address-cells and #size-cells support

  Resolves: rhbz#1436745

- Fix ppc64 "grub2.chrp" to be "grub.chrp"

  Resolves: rhbz#1442970

* Wed Apr 12 2017 Peter Jones <pjones@redhat.com> - 2.02-0.57

- Make "grub2" require the grub2-efi-... package on arches where there's no

  legacy build.